Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6249bcbb-74f3-43f9-9e3c-de5fbf622dd1.roa
File:                     6249bcbb-74f3-43f9-9e3c-de5fbf622dd1.roa (raw, json)
Hash identifier:          V6smAVNmTUgzAyW2/ksxO6olton1XiKFlBGWTGNAk/Q=
Subject key identifier:   3E:9B:87:B5:32:C2:68:23:C4:96:D9:1B:34:E6:FD:A9:ED:90:B4:45
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6647204C94A0A2979E0757AD70288698D2AAEBA2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6249bcbb-74f3-43f9-9e3c-de5fbf622dd1.roa
Signing time:             Thu 12 Feb 2026 00:41:20 +0000
ROA not before:           Thu 12 Feb 2026 00:41:20 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:26ac::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:47:20:4c:94:a0:a2:97:9e:07:57:ad:70:28:86:98:d2:aa:eb:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 00:41:20 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=e795edd38f90d3ad5836009d80b44eb69b2016ae4f8f3554750a3d095003acb9, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0c:20:f7:a4:d5:c8:0b:1d:b4:0a:05:af:5b:
                    77:76:15:ba:5b:18:75:a6:64:bb:8a:62:59:d9:56:
                    b6:5f:1c:f4:11:d8:82:85:7c:57:b0:6e:de:60:cc:
                    1e:b3:95:bd:96:f3:c9:d9:09:3f:d4:c1:e8:ca:bb:
                    45:a3:08:58:bf:90:ac:5b:dc:d3:c5:22:69:d6:43:
                    82:9b:86:75:06:09:4b:75:b5:35:a0:c6:12:ac:a3:
                    a6:d6:1a:27:4e:8d:10:80:39:5e:56:0b:aa:26:d4:
                    f3:5f:83:f3:1b:32:69:f7:38:51:a4:6f:60:96:c4:
                    9f:a8:d3:b2:7e:70:55:d0:f2:3c:5b:e8:cc:13:f1:
                    5c:33:7f:bb:1f:18:61:d6:68:83:e3:63:65:97:ed:
                    b9:1d:36:5a:eb:96:1e:b6:87:3d:da:f8:21:a1:86:
                    0f:4b:1b:18:78:af:15:df:a9:42:c8:bf:b8:f5:a3:
                    7c:15:3f:c6:e0:85:60:4a:13:b2:c6:0f:d1:50:a6:
                    24:50:bf:20:e4:80:cf:fc:8e:c0:e9:4b:c0:fe:4a:
                    7f:bc:40:3b:cb:07:d8:b5:4e:f9:85:e8:1b:eb:23:
                    69:da:94:44:93:77:59:80:13:86:58:94:90:04:17:
                    ba:f7:e2:25:2f:6c:68:f6:bc:1d:e2:00:98:9b:d1:
                    e5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:9B:87:B5:32:C2:68:23:C4:96:D9:1B:34:E6:FD:A9:ED:90:B4:45
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6249bcbb-74f3-43f9-9e3c-de5fbf622dd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:26ac::/46

    Signature Algorithm: sha256WithRSAEncryption
         98:b0:ce:99:7b:4c:3c:79:0c:96:9f:0c:2f:38:9c:35:de:f2:
         45:6f:e5:1f:9d:7c:71:20:e9:90:c8:29:93:40:d8:1d:15:73:
         e1:de:63:0a:5a:4f:b9:9f:78:ef:26:d6:1a:c4:13:ca:f1:d5:
         96:69:34:ab:10:67:92:6f:27:08:a9:bf:fc:49:ba:1c:d3:51:
         ef:dc:ef:3b:a5:3a:c1:d5:42:bf:88:17:08:89:6b:4d:51:12:
         70:45:6f:9c:71:08:18:91:3e:43:df:a0:84:d0:29:4d:c6:85:
         c3:75:8a:48:f9:1e:9d:79:0f:6d:40:71:a4:74:85:c7:be:c1:
         b8:8d:ea:45:b9:32:de:ec:6e:cc:b8:4d:9c:bb:3d:7c:ab:28:
         58:be:3e:1d:0d:cf:c0:f6:1e:d1:cb:ff:6d:e1:98:f4:ef:d9:
         01:7a:3a:e7:42:b8:d1:b8:95:49:f2:08:3b:fc:eb:cb:ca:33:
         3c:1a:77:db:93:30:a2:2e:40:b8:72:8f:53:b5:6d:de:a5:37:
         bc:a4:fa:75:dc:ed:0f:ae:77:44:18:4e:e1:c3:02:b0:51:06:
         b7:34:ee:06:5b:d5:fe:5b:4c:26:a0:31:b4:48:12:7f:03:af:
         c6:53:87:11:f7:90:14:60:7e:7b:f6:e6:1b:67:33:b3:4e:fb:
         d1:f3:c2:11
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:13:41 2026 by rpki-client